Microsoft Teams will add new protections as attackers target external calls with brand impersonation tactics

Thanks to a new feature for Microsoft Teams, the next time you hear the app's famous ring for calls, you won't have a brand impersonator on the other end.

The change is set to start rolling out in mid-May. The rollout should be complete by the end of the month.

Teams will take a look at any inbound calls with a specific emphasis on brand impersonation. If the app detects a likely impersonator, it will show a high-risk call warning before you answer.

You will still be able to accept the call if you'd like. Teams will also show options to block that user or end the call.

The new feature is detailed in the Microsoft 365 Admin Center. If you cannot sign in there, you can read the details through the Microsoft 365 Message Center Archive.

"Brand Impersonation Protection for Teams Calling adds proactive safeguards against fraudulent or deceptive external callers who attempt to appear as trusted organizations. This helps reduce social-engineering risks and improves tenant security when users receive first-contact external calls. This update aligns with Microsoft’s ongoing investments in caller identity protection and secure collaboration."

The feature works with inbound VoIP (Voice over Internet Protocol) calls for callers getting in contact for the first time.

Admins don't need to do anything to enable the feature.

Why Teams is a target for impersonation

We first covered this feature in January, but it is only rolling out now. While many people use Teams for internal chats, external calls are a normal part of sales, support, and client work.

If you speak with customers or partners, you probably receive a steady stream of calls from unknown contacts. That makes Teams an attractive target for brand impersonation and other social‑engineering attacks.

Teams users have already been on the receiving end of phishing attempts. Earlier this year, Check Point researchers found attackers using urgent billing names to bypass detection and pressure people into responding. Brand Impersonation Protection is meant to catch the same kind of behavior when it happens over a call instead of a message.

Microsoft continues to add security features across Teams, but safe practices still matter. You should treat unexpected invites or calls with caution and verify anything that feels out of place. If something looks suspicious, you should ask an admin to confirm who is trying to reach you.

Join us on Reddit at r/WindowsCentral to share your insights and discuss our latest news, reviews, and more.